Priority LOW 36
Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00263 · Published 2022-05-12 · No fix listed
Priority LOW 35
Out-of-bounds read in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via adjacent access.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.00403 · Published 2023-11-14 · No fix listed CWE-125
Priority LOW 35
Insufficient access control in a subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Pentium(R) Processor J, N, Silver and Gold Series; Intel(R) C…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00668 · Published 2019-11-14 · Fixed
Priority LOW 33
Improper initialization in the Intel(R) TXT SINIT ACM for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS 3.1HIGH 7.2· Local · High privileges · No interaction · EPSS 0.00212 · Published 2023-02-16 · No fix listed CWE-665
Priority LOW 33
Time-of-check time-of-use race condition in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS 3.1HIGH 7.9· Local · High privileges · No interaction · EPSS 0.00153 · Published 2022-11-11 · No fix listed CWE-367
Priority LOW 32
Hardware debug modes and processor INIT setting that allow override of locks for some Intel(R) Processors in Intel(R) Boot Guard and Intel(R) TXT may allow an unauthenticated user to potentially enable escalation of priv…
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00279 · Published 2022-05-12 · No fix listed
Priority LOW 32
Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00438 · Published 2021-11-17 · No fix listed
Priority LOW 30
Improper input validation in the Intel(R) SGX SDK applications compiled for SGX2 enabled processors may allow a privileged user to potentially escalation of privilege via local access.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.0033 · Published 2021-11-17 · No fix listed CWE-20
Priority LOW 30
Improper access control in the PMC for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00334 · Published 2020-11-13 · No fix listed
Priority LOW 26
Improper isolation of shared resources in some Intel(R) Processors when using Intel(R) Software Guard Extensions may allow a privileged user to potentially enable information disclosure via local access.
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00249 · Published 2023-02-16 · No fix listed CWE-922
Priority LOW 26
Insufficient access control in subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Pentium(R) Processor J, N, Silver and Gold Series; Intel(R) Cel…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00646 · Published 2019-11-14 · Partial fix
Priority LOW 25
Improper isolation of shared resources in some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00326 · Published 2022-08-18 · Partial fix
Priority LOW 25
Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00361 · Published 2022-05-12 · Partial fix
Priority LOW 25
Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00419 · Published 2020-11-12 · Fixed CWE-203
Priority LOW 25
Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00451 · Published 2020-11-12 · Will not fix
Priority LOW 23
Improper buffer restrictions in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.
CVSS 3.1MEDIUM 5.3· Local · High privileges · No interaction · EPSS 0.00176 · Published 2023-08-11 · No fix listed CWE-92
Priority LOW 20
Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via local access.
CVSS 3.1MEDIUM 4.4· Local · High privileges · No interaction · EPSS 0.00167 · Published 2023-08-11 · No fix listed CWE-691
Priority LOW 20
Insufficient key protection vulnerability in silicon reference firmware for Intel(R) Pentium(R) Processor J Series, Intel(R) Pentium(R) Processor N Series, Intel(R) Celeron(R) J Series, Intel(R) Celeron(R) N Series, Inte…
CVSS 3.0MEDIUM 4.4· Local · High privileges · No interaction · EPSS 0.00354 · Published 2019-05-17 · No fix listed CWE-522
Priority LOW 17
Improper input validation in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via adjacent access.
CVSS 3.1LOW 3.5· Adjacent network · Low privileges · No interaction · EPSS 0.003 · Published 2023-11-14 · No fix listed CWE-20